Supports the operations surrounding the management of the official documents and records for an organization. The overall accountability rating for this information classification is Low.
Confidentiality level = Low
The confidentiality impact level is the effect of unauthorized disclosure of record retention information on the ability of responsible organizations to store, track, account for, maintain, retrieve, and disseminate official documents and records. When the data being retained belongs to one of the information types described in this guideline, the confidentiality impact assigned the data and system is at least that of the highest impact information type collected. Typically, the unauthorized disclosure of most business management information retained will have only a limited adverse effect on organizational operations, assets, or individuals. trade secret information and trade secret systems are outside the scope of this guideline.
Known mitigating factors toward changing the confidentiality level
Where more sensitive information is involved, it will most commonly be personal information subject to the various state and international privacy laws or information that is proprietary to a corporation or other organization. The various state and international privacy laws Information provisional impact levels are documented in the Personal Identity and Authentication information type. Such information will often be assigned a moderate confidentiality impact level. Where any of the information to be collected can reasonably be expected to have a high confidentiality impact level, then the record retention system must be assigned a high confidentiality impact level. In some cases, the impact assessment should consider that the aggregate of information retained might have a higher confidentiality impact than any individual information element.
Integrity level = Low
The integrity impact level is based on the specific mission and the data supporting that mission, not on the time required to detect the modification or destruction of information.
Known mitigating factors toward changing the integrity level
Where integrity compromise adversely affects the ability of an organization to access its records or results in erroneous back-up information or archives, the impact on organizational operations can be serious. In such cases, the integrity impact level would be moderate. In the case of large-scale archives or archives involving key organizational assets (e.g., organizational archives), the integrity impact can be particularly severe and the impact level would be high.
Availability level = Low
The availability impact level is based on the specific mission and the data supporting that mission, not on the time required to reestablish access to record retention information. Functions and processes supported by most record retention information are not time-critical. Record retention processes are generally tolerant of reasonable delays. In most cases, disruption of access to record retention information can be expected to have only a limited adverse effect on organizational operations, organizational assets, or individuals. Not many business management systems perform functions for which temporary loss of availability can cause significant degradation in mission capability, place the organization at a significant disadvantage, result in major damage to assets, or pose a threat to human life.